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CENTRAL FAX CENTER 

AUG 2 3 2006 



IN THE UNITED STATES PATENT AND T RADEMARK OFFICE 

Applicant: Mike C. Robinson el ah Examiner. Alma A. Boutah 

Serial No.: 10/061.619 Group Art Unit: 2143 

Filed: February 1 , 2002 Docket No.: 100200201-1 

Title: SECURE INITIALIZATION OF COMMUNICATION WITH A NETWORK 
RESOURCE 

DECLARATION OF PMOR INVENTION UNDER 3 7 C.F.1L S 1J31 

Commissioner for Patents 

P.O. Box 1450 

Alexandria, VA 223U-1450 

Dear Sir/Madam: 

This Declaration is submitted to establish prior invention of the subject matter of the 
present patent application. The persons making this Declaration are the inventors, Mike C. 
Robinson, Andrew K. Khieu, and Mark C. Lucas, 

Accompanying this Declaration arc Exhibits A through F to establish conception of 
the subject matter of the present patent application in the United States prior to the earliest 
effective date of October 29. 2001 of the Nonoyama et al. U.S. Patent Application 
Publication No. 2002/0145748 coupled with due diligence from a date prior to the earliest 
effective date ofihe Nonoyama Publication up to the filing date of the present parent 
application (Le. r constructive reduction to practice). 

Exhibit A (4 pages) includes an HP invention Disclosure prepared and submitted by 
the inventors, Mike C. Robinson, Andrew K.. Khieu, and Mark C. Lucas, on October 15, 
2001 . This invention disclosure entitled "A Secure Method to Initialize Security Information 
on Network Printer Over an Insecure Network Connection by Printing the Security 
Information" describes subject matter of the present patent application, and was assigned HP 
Patent Disclosure Number fPDNO") 1 0020020 1 . 

Exhibit 8 (1 page) includes a copy of a Patent Evaluation form dated October 19* 
2001 as completed for the invention disclosure of inventors, Mike C. Robinson, Andrew K. 
Khieu, and Mark C. Lucas entitled "A Secure Method to Initialize Security Information on 
Network Printer over an Insecure Network Connection by Printing the Security Information.' 1 
The Patent Evaluation form of Exhibit B indicates that the invention disclosure would be 
reviewed at the next "coordinator meeting." 
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Dtckrttioo adder 37 CF.R. § 1,13! 

Appliwm: Mike C. Robinson ei al. 
Serial No-: 10/061,619 
Filed: February l r 2002 
DodXiNa.: 100209201-1 

rule; SECURE INITIALIZATION OF COMMUNICATION WITH A NETWORK RESOURCE . 

Exhibit C (t page) includes an email of November 09, 2001 informing the inventors 
that their invention disclosure (HP Patent Docket Number 100200201) was placed in the 
active disclosure list and would be reviewed at the next Patent Coordinator Meeting for their 
division. The patent review meetings occur based on the availability of the required 
attendees and based on there being a sufficient number of invention disclosures available for 
review. 

Exhibit D (3 pages) includes a copy of a letter dated December 18, 2001 from HP 
Patent Agent David M. Mason to patent attorney James Hao of Wagner v Murabito & Hao 
requesting a quote of the cost to prepare a US patent application based on HP Invention 
Disclosure No. 100200201-1 (i.e., the present patent application). 

Exhibit E (1 page) includes a Request for Quote and Engagement Letter Agreement 
for the preparation of a US patent application based on HP Docket No. 1002002Q1-1 (i.e., the 
present patent application). The agreement was signed by patent attorney James Hao of 
Wagner, Murabito & Hao on December 21, 2001 and by HP Patent Agent David M. Mason 
on January 1 1 . 2002 (possibly incorrectly dated as January I I t 2001). The signed agreement 
was then return-faxed to Wagner, Murabito & Hao on January 1 1 , 2002. 

During the period between at least January 1 1, 2002 and February 1 , 2002, the pateni 
application for invention disclosure 100200201-1 (i,e„ the present patent application) was 
prepared, and on February 1, 2002 the patent application for invention disclosure 10O20020 1- 
I (i.e., the present patent application) was filed. 

Exhibit F (t page) includes a copy of a letter dated February 3. 2002 from Wagner, 
Murabiio & Hao to Hewlett-Packard Co. forwarding copies of the formal documents, 
specification and formal drawings as filed with the USPTO on February 1, 2002 for HP Ref: 
100200201-L 

From these exhibits, it can be seen thai the subject matter of the present patent 
application was conceived in the United States prior to the earliest effective date of October 
29, 2001 of the Nonoyama et al. U.S. Patent Application Publication No. 2002/0145748 
coupled with due diligence from a date prior to the earliest effective date of the Nonoyama 
Publication up to the filing date of the present patent application (i.e. constructive reduction 
to practice). 
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Detention utiter 37CT.R- § 1*131 
Applicant: Mike C RoWnson et aL 
Serial No.: 10/061,619 
Filed: February L 2002 
Docket No.: 100200201-1 

TUIe: SECURE INITIALIZATION OF COMMUN FCATION WITH A NETWORK RESOURCE 

As a person signing below, ( hereby declare lhat all statements made herein of my 
own knowledge arc true and that all statements made on information and belief are believed 
to be true; and further that these statements were made with the knowledge that willful false 
statements and the like so made are punishable by fine or imprisonment, or both, under 
Section 1 001 of Title 1 8 of the United States Code, and lhat such willftil false statements may 
jeopardize the validity of the application or any patent issued thereon. 




MikcC. Robinson 





Andrew 1C fthieu 




Mark C, Lucas 
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INVENTION DISCLOSURE page we of 

PONO \£b ZOQtO\ OATERCVO ATTORNEY 

totfmrttong Tto ' intomatoo contained in fh* docuwenl is COMPAHY COmoeHTW. and may not DO <*<*>"*J> oten «^P™ 
Submrt rte dsdosuK to »a HP L*gs< DepMmm « soon as possible. Wo patert p«f «*» * <*» & pam> W^*™ Is 
authorized, prepared, and subat&led to me Government ■ — > ~ 



Descriptive THIe ot Invention: , . .„ 

A secure method to initialize security information on network printer over an insecure network connection by 

printing the security information. .. — — 



Name ot Project: 

Carson Project underway at Hewlen-Packard in ilPS Rosevi)le._ 



Product Name or Number 

Vnsedetcription ol^I^vmiion published, or are you planning to puMish? » so. *e datels) »n« publication w 

No. 

Was a product including the invention announced, ottered for sale, sold, or is such activity proposed? 

No. this feature has not been announced. This feature will be available in the January 2002 release of the 

JetDireci fiirnware. 

Was the Invention disclosed to anyone outside of HP, or will such disclosure occur* II so, the dale(5) and name(s): 
Was the Invention described in a lab booh or ether reooni7 If so, please identify (tab book I, etc) 



No. 



Was the invention built or tested? H so, the date: 

No. 

Was this invention made under a government contract? If so, the agency and contract, number: 

No. 



Description of invention: flaw* press™ sS nconbot the awe** arxfanacn uWkml pages tor me toning. fa» aoW^pagesnoum 

A. Description ettoeccflswcSr^^ 4 ,imi " 8 *9*k***K 
graphs; flowcharts; computer istings; test results; etc.) 

B. Advantages ol the invention over whal has been done before. 

D. ^StS^jttS^^teg «< available, attac h copies of product Endure, technical articles, patents, etc.). 

'Signature of lmrentoi(s>: Pursuant to my (our) employment eyeemero. I ant) suemlt this disclosure on ma date: I to/i^/zoo i J 

™™ ^ c - B0b "^ B ^ STilp S£r 



-z^ rr""" — £S 



u«fcr Luc » tfkuV P K4U* ~" g " ftft iPSRosevlne 

°g j 1179 HaAaLuc ^ 1 = TOnei MaM op &%& lab Name 

Employee No. Name Signature leuw K ' 



EmP<0y89 fflSjan ^inventors, inc^arA^Sgfcn on ^«-r afa* *^ jdajfaj to fhs ddgUgga 



Telnet Maflstop Entity & Lab Name 



Perm 3.1 idf.doc.rev.06/CKVOO 

. ^« . M 1 1~ . I MC I : i i i n?— i g— i | 
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Write in Dark Ink on Front Side Only. Please 



INVENTION DISCLOSURE company cqnrdewtw. page of. 



Signature of Witnesses): cpjm* * *ww»of*ipwwfei «"*s****^ 
The invention was first explained to. and understoo d by. me (us) on this date: i J 



^^ , " w """' r " S-S ' ' 



Inventor & Home Address Infarction: jffii^^fr^^ 



J2SJS 



NO 



Greeted «4 fVUtfnemt, mrtfe nrjrm. 



Formal kUdociev.oeAXJW 



6©^*^i*WK*<^F.O..^rTO? P.O. BOX ^ 



NO, _ 



Street 



S55T 

ii 5io*» fiifitt 1^5 



Do you Mv» i R«**f*tf P.O. A*h«*? PA BOX Crty " 
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Description of Intention: Please preserve dD records of the Invention and attach addWonal pages for th& following. Each adcfitonal page should 
6* gggj >Bg dated by the invenlorfs) and «itness(es). 



A- Description of the construction and operation of the invention (Include appropriate schematic, block. 
& timing diagrams; drawings; samples; graphs; flowcharts; computer listings; test results; etc-) 

The Security Configuration Print Page provides a secure method of configuring network devices over an 
insecure network by priming sensitive security information and not transmitting the information across the 
network. Two technologies initially benefiting from This feature: SNMPv3 initial account generation and 802,11 
Access Point Key configuration > 

For generating the initial $NMPv3 account: 

1 . Management application contacts a print server and sets an SNMPv3 Security Configuration Print Page 
object. 

I The print server creates random security parameters and issues a command to print the SNMPv3 Sccunly 
Configuration Print Page. 

3. The user retrieves the SNMPv3 Security Configuration Print Page from the primer. 

4. The user inputs the newly created security parameters into the management application. 

5. Management application contacts the print server using the new security parameters in an encrypted mode. 

For installing 802 J I Access Point configuration parameters: 

1 . Management application contacts a print server in ad hoc mode without encryption and sets an 802.1 1 
Security Configuration Print Page object. 

2. The print server creates a random 802.1 1 Wired Equivalent Privacy (WEP) key and issues a command to 
print the 802.1 1 Security Configuration Print Page. The WEP key is used to encrypt transmission in 802.1 1 
ad hoc mode. 

3 The user retrieves the 802. 1 1 Security Configuration Print Page from the printer. 

4. The user sets their computer's 802.11' s configuration to ad hoc mode with the WEP key from the newly 
created 802. 1 1 Security Configuration Print Page. 

5. Management application contacts the print server in add hoc mode with randomly generated WEP 
encryption obtained from the 802. 1 1 Security Configuration Print Page. 

6. The management application contacts a print server and configures the infrastructure mode parameters tor 
the local B02. 1 1 Acces* Point. 

7. The print server restarts in infrastructure mode with the local access point. 

B. Advantages of the invention over what has been done before. 

This feature simplifies the installation of new devices on an insecure LAN when a secure method is required. 
The ease-of-use during installation of new network devices on a LAN is a valuable feature to HP customers. 
Likewise, a secure method to configure a network device is desirable. Installation typically becomes a 
compromise between ease-of-use and security. 

Access to a networked device could be compromised through sniffing the network traffic or initializing security 
parameters with default accounts. Hackers can reverse engineer from default accounts any new accounts or 
modifications. Devices are even more vulnerable when default security accounts are hard^coded into a device, 
openly published, or transmitted across the wire or through the air without encryption. 

The secure configuration issue came about in regards to initializing an SNMPv3 account on the JctDirect. 
Initially the JetDirect used SNMPvl with its community name to man age access to JeiDirect. The problem witn_ 
Formal ttf^oc, rev. Q6AXV00 



MX» CO/ qik irjnw-l li*BZ=LL 102- 10- 1 I 

PAGE 22130 1 RCVD AT 8123/2006 9:05:49 PM [Eastern Daylight Time] ' SVR: USPTO-EFXRF-1/9 8 DNIS:2738300 ' CSID:612 S73 2005 1 DURATION (mm-ss):0M0 



08/23/2006 20:12 FAX 612 573 2005 



DICKE,BILLIG8»CZAJA P. A. 



© 023 



Exhibit A 

' ; Write jn Dark Ink on Front Side Only, Please u 

the community name is that management applications transmit the community name in plain text. Anyone 
sniffing the wire could discover the "password" used to manage the print server and assume control of the 
device. Making matters worse, 802. 1 1 wireless networking requires the device to be configured with the 802.11 
Access Point key in order for the network interface card to connect to the LAN. This key must not be 
transmitted in plain text Anyone sniffing the 802.11 airways could discover the Access Point key and 
compromise the network security. 

G Problems solved by the invention. 

The Security Configuration Print Page provides a generic way to provide out-of-band configuration without a 
device input requirements but using the peripheral's output capabilities. This invention leverages the existing 
physical interface the JetDireci provides to the printer, without additional hardware or the transmission of 
sensitive information across an insecure network. The initial SNMPv3 account cannot be reverse engineered, 
but only through brute force iterative trials. Sensitive information, such as 802.11 Access Point key, will 
remain secure from snoopers. 

D- Prior solutions and their disadvantages (if available, attach copies of product literature, technical 
articles, patents, etc-)* 

Prior methods of assigning security information (SNMP. TFTP. TELNET and Embedded Web) transmit 
sensitive information in plain text across the network. A simple trace at startup, configuration, or any general 
communication exposes passwords. Only the access control list provides Set access control based on the IP 
address of the client. The access control list does not prevent spoofing, where a client assumes the IP address or 
an authorized client. Secure Socket Layer (SSL) web access will be available with the Carson Project, but 
requiring a customer to use set up SSL first to configure SNMPv3 does not promote ease-of-use. SNMPv3 
provides encryption and authentication over die wire. Some network devices provide a poinno-point interface 
(terminal or USB connector, front panel display. e<c.) to configure accounts, or must provide a default user 
account. Any additional physical interface to the JelDirect is not cost feasible, the front panel is limited and 
cumbersome, and default user accounts are a security risk. The Security Configuration Print Page option 
complements, not replaces, these other configuration methods. 



Fom>3.1 itf4toc rev. 06/0300 
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Patent Evaluation 
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Earner B 



internet 

IMAGNS&FUNI1NG 

systems 



Date: October 19. 2001 

Simplistic one line descriptive title of invention: 

A Mcnit method to initf *'™ r*" ^ info™"*"" 1 ftl> » network printer over «. 
connection hv printing t he security information. 

Inventors): 

tmr Rgi 

Andrew Khieo 
MarkC. Lucas 



network 



XX HP Business 

Non-Redundant 

New Work 

Expedite Immediately! 
Meeting dale: 



Yes 



No 



(to be scheduled by Patent Admin.) 



Review at next coordinator meeting! 
Meeting date: 



XX Yes 



No 



(to be scheduled by Patent Admin.) 
Referred back to inventors) foe more work? Yes _XXXX No 



Coordinate with other patent submittal , 



| award approval? _X2£_Yes 



No 



Evaluated 



* ttJJL 




Signature/Mark W. Fidler/ilPS 



October t9. 200! 
Date 



i 
i 



NOV - 5 2001 



J 



HEWLETT 
PACKARD 



SecarcJiJHallaiLW.M^DOC 



1Q/19/200I 
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FLORES.TERRY (HP-Cuportlno,cx1) 



From: LEGAL, IP (HP-PatoAlto.ejmenl) 

?r ROT^^rf Mll^^(HP^P^o^^!ex1); AARON.ROBERT (HP-Bois©.eJfl); LUCAS.MARK 

(HP-RosevIIIe.exl) 

Cc: FLORES.TERRY (HP-Cupertlno,e*1) 

Subject? Receipt of Invention Disclosure 1 00200201 

*+* Please do NOT reply to this message as the "From" mailbox is NOT 
monitored. *** 

Thank you for submitting an invention Disclosure Form entitled: n A 
Secure Method To Initialize Security information On Network Printer^Over 
An Insecure Network Connection By Printing The Security information . 
We have placed this disclosure in our active disclosure list so that it 
will be reviewed at our next patent coordinator meeting for your 
division. After this meeting you will be informed of any decisions 
reached regarding your disclosure. 

Your disclosure has been assigned an HP Patent Docket Number of 
100200201. You may call the Legal Department's intellectual Property 
section at any time to check on the status of your disclosure using this 
PD Number. 

Again, on behalf of HP, we want to thank you for submitting your 
invention disclosure. Please bear in mind that you should treat all 
information about this invention as confidential- Please contact me 
immediately if you need to disclose this invention outside of 
Hewlett-Packard Company. Failure to do so may cause forfeiture of HP s 
patent rights. 

Sincerely, 

David M. Mason 

Legal Department 

Intellectual Property Section 
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CENTRAL FAX CENTER 
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UgaiPfHtwtf* MS; 44118 
19111 FrwridpA.*. 
&p«imGA 9S014W1 



AUG 2 3 2006 



David M Meson 

PATENT AGCKT 



December 18, 2001 



♦1 (408) 447-4044 Til 
408 4470054 fox 



James Hao 

Wogner, Murabifo & Hao 
Two North Market Street 



Third Floor 

Son Jose, CA 951 13 



RE: Preparation of Potent Application 

Pursuant to Outside Counsel Procedures Dated November 2001 
HP Reference No.: 100200201-1 

Entitled: A Secure Method To Initialize Security Information On Network Printer Over An 
Insecure Network Connection By Printing The Security Information 
HP Required Date: February 1, 2002 

Dear James; 

We woukJ lika you to provide a quote of the COSt for your firm to prepare a US Patent 
application based on the HP Invention Disclosure identified above, a copy of which is enclosed. 

Your quole should be based on preparing on application including the items noted on the 
enclosed Outside Counsel ChecHisl and according k) HP's Outside Counsel Procedures 
referenced above, for filing by our Required Date. 

Your quote should be submitted on the enclosed Request for Quote and Engagement Letter 
Agreement. If your quote b accepted, we wii return a fully executed copy of the Agreement to 
you for your records. The Agreement wlD not be binding on you or en HP until 
signed by HP'* authorized representative. 

If the Agreement b not signed and returned to HP, any bHU submitted by you 
cannot be paid* 

Thank you for your assistance in reviewing this invention disclosure. If your review indicates a 
possible conflict for your Firm, you should advise us within one week of receipt of this letter- 




Enc: HP Invention Disclosure 
RFO 

Filing Procedures Checklist 
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Request for Quote and Engagement Letter Agreement 

RE: Hewlett-Packard (HP) Docket No,; 100200201-1 
Date: December 1 8, 200 1 



X This is a request for a quote for the following services: 

This is a confirmation of your quote for the following services: 



PREPARE 

X Application 
Response 



File with USPTO 
Return to HP for filing 



RECEIVED 
CENTRAL FAX CENTER 

AUG 2 3 2006 



Other YOUR FINISHED PRODUCT TO HP SHOULD INCLUDE ALL ITEMS ON THE ENCLOSED CHECKLIST 



HP REQUIRED DATES: 



February 1,2002 



Date for Receipt by HP 
Date to be Filed in PTO 



HP Attorneys of Record: (to be include d™ Ihi ^D eclaration) 
Customer Number 



2£E 



HP Primary Technics! Conttttl ALL INVENTORS SEE DISCLOSURE FOR DETAILS 
Telephone: 
HP Entity: 
Address: 



ADDITIONAL TERMS OR INSTRUCTIONS: 



TOTAL PRICE: (Including Formal Drawings) 

Check here if your quote does not include up to a 2 hr. preliminary patentability search 



I agree to the terms of this Agreement including the additional terms above, pursuant to the HP Procedures for Outside Counsel 
reWsed November 2001 , which I have received and reviewed. This Agreement will not be binding on either parry until signed 
by an authorized representative of HP. 



Attorney at your firm handling this matter: 



Wagner. Mu»biu>AHao HEWLETT-PACKARD COMPANY 



By: B y { 



James Hao David M Mason 
Dated: 
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Filing Procedures Checklist 
For Outside Counsel 
When Filing USPTO Application 
Customer Number 022879 



RECEIVED 



CENTRAL FAX CENTER 

AUG 2 3 2006 



HP PDNO: 10020020M 



Date for Receipt by HP; 



Date to be Filed in USPTO: February 1,2002 



Your ret No* 



Outside Counsel is responsible for returning ALL herns unless marked by "N/A" 
NEW APPLICATIONS 

_ Request for Quote executed and returned to HP for signature (via FAX or email) within 10 

business days 
Confirmation RFQ received from HP 

Final draft approved by inventors) and HP Responsible Attorney as necessary and submitted to 
HP 

_ Confirmation postcard addressed to HP* 

Copy of all filing documents for HP's file within one week from filing date 
Prepared Transm ittal Letter 

_ Executed Declaration and Power of Attorney indicating HP as correspondent 
Original executed Assignment (returned to HP for filing later) 

Copy of Application on A4 paper according to PCT header and margin requirements 
~ Set of Reduced Claims and Abstract with reference numbers for foreign filing 
Formal drawings according to PCT (Delete EPO) format 

_ IDS (if applicable), Form 1449 and copy of cited references 

_ Electronic copy of application on diskette or CD (not via email or internet) 
Electronic copy of drawings as .pdf file on same diskette 

Copy of transmittal and Declaration faxed to HP on date application mailed to USPTO by Oi 
Shortest independent claim having 1 75 words or less 

N/A Prepare Request for Non-US Publication Under 35 US.C. 1 22(b)(2)(BXi) 
N/A Prepare Request for Early Publication 



Hewlett-Packard Company 
Legal Department - MS: 44L1 8 
191 1 1 Pruneridgc Ave. 
Cupertino. CA 95014-0691 
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Request for Quote and Engagement Letter Agreement 
RE: Hewlett-Packard (HP) Docket Kq. 100200201-1 
Date: December 16, 2001 



X I Ms is a t eqy est for a quote for the following services; 

Thifi is a confirmation of your quae* far the following services. 




PREPARE 

X Application File with USPTO 

Response Return to HP for ft] in; 



'9 



X Other. YOUR FINISHED PRODUCT TO HP SHOULD INCLUDE ALL ITEMS OM THE ENCLOSED CHECKLIST 



HP REQUIRED DATES: Date for Receipt by HP 

February 1.3002 Date id be Filed in PTO 

HP Attorn ty? Of Record* <t» h» twrlude rjjgalhg D eclaration) 
Customer Number [022879 

HP r. ;>unr> TmQnlnl Contact: ALL INVEN I OKS Sfc* DISCLOSURE TOR DETAILS 
Telephone: 
HP Entity: 
Address; 

ADDITIONAL TF.RMS OR INSTRUCTIONS: 



TOTAL PRICE; ______ 

Check here if your Quote does Qftlme! 




(Including Formal Drawings) 

OptO a 3 hr\ preliminary pairntabilify s*arrh 



I agree to the tcmis of this Agreement including the additional terras above, pursuant to the HP Procedures for Outside Counsel 
vc vised Ngvcmoer 2001, whiett I have received and reviewed. This Agreement will not be binding on cither party until signed 
by an authorized representative of HP. 



Attorney at your firm handling this matter; 

J-Vagner, MinahfrpQf H*o 

Br. ^ 

mien? 





Doted: 



avidMMaavn 
if*!** 
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February 3, 2002 



IP Administration 




Legal Department, M/S 35 
HEWLETT-PACKARD CO. 
P.O. Box 272400 



Fort Collins, CO 80527-2400 



Re: United States Patent Application entitled "SECURWBfflj 
OF COMMUNICATION WITH A NETWORK RESOUtt 

Your Ref: 100200201-1 
Our Ref: HP-100200201-1 



Dear Sir /Madam : 

Enclosed please find copies of the formal documents, specification and formal 
drawings as filed by our office with the USPTO on February 1, 2002. Please also find 
an electronic copy of the filed application in Word and PDF format, the set of claims 
with reference numbers for filing in Europe and the annotated abstract. 

We appreciate the opportunity to provide services to you and Hewlett 
Packard Company. If you have any questions or comments, please feel free to 
contact us. 

Sincerely Yours, 

Wagner, Murabito & Hao LLP 




Desiree Caldwell 



encl. 



PAGE 30/30 ' RCVDAT 80312006 9:05:49 PM [Eastern Daylight Tone] ' $VR:USPT0#XRMI9 ' DNIS:2738300 ' CSID:612 573 2005 * DURATION (mm«s):0$-30 



